Close
  • Latest News
  • Artificial Intelligence
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Artificial Intelligence
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Cloud
    • Cloud
    • Cybersecurity
    • Networking

    Palo Alto Firewall Boosts Performance with Single Pass Architecture

    A single pass parallel processing system applies all elements of threat protection with a single scan, which eliminates redundant functions that bog down a traditional system.

    By
    Zeus Kerravala
    -
    December 20, 2021
    Share
    Facebook
    Twitter
    Linkedin

      The new Palo Alto Networks PA-400 ML Powered Next Generation Firewall (NGFW) product family comes in a compact form factor and is designed for branch offices, small businesses, or retail locations.

      The product aims for the next generation firewall market, and it features natively integrated security features, such as threat prevention, advanced URL filtering, DNS Security and malware analysis.

      The PA-400 Series is available as four models: PA-410, PA-440, PA-450, and PA-460.  These four models offer flexibility for a range of performance requirements. Most significant, the company claims, is the product’s single pass architecture.

      Also see: Top Next Generation Firewall Vendors

      Single Pass Architecture Improves Security Performance

      Palo Alto Networks commissioned independent testing firm Miercom to performance test the product, as it believes its single pass architecture provides superior price performance compared to a traditional NGFW with add-on services.

      A single pass parallel processing system applies all elements of threat protection with a single scan. It eliminates many of the redundant functions that bog down a traditional system with add-on capabilities.

      All packets are processed and routed, and policies  are applied, decoded and signature matched. As packets are processed, networking, policy lookup, application and decoding, and signature matching for all threats and content are performed only once. This reduces the processing load required to perform multiple functions in a single device.

      Miercom tested four Palo Alto Networks products against another leading firewall vendor that had similar pricing and positioning.

      Miercom used the Ixia BreakingPoint PerfectStorm test tool to push a real-world load on each platform using an 8 x 10 Gig-E line card. This created life-like scenarios commonly seen in small businesses and branch office environments.

      Also see: Best Secure Web Gateway Vendors

      Key findings from the Miercom report

      • Consistent throughput with security services enabled. One of the benefits of single pass is that performance remains high when multiple services are enabled, and the Miercom test validated that. Across the various products, the Palo Alto Networks PA-400 series showed consistently superior throughput ranging from 1.8x better to 6.6x. This ensures that application performance remains high instead of being bogged down by security. An interesting factoid from my research is that 63% of networking and security professionals admit to turning security off in favor of application performance. The single pass design eliminates this trade-off.
      • Superior application traffic performance. Miercom tested both vendor products on a range of applications such as MySQL, SIP and FIX. According to the report, Palo Alto Network appliances were observed having an average 24% decline in TCP sessions with services enabled. The competitive products saw over 3x the loss, or 82% average degradation. For connection rate, PA-400 series experienced a decline of only 11% compared to the competitive vendor, which saw a 92% drop.
      • Outstanding price performance. Miercom used the throughput data and calculated a total cost of ownership (TCO) comparison. The testing company calculated the throughput with services enabled, and from that derived a TCO per protected Mbps. Palo Alto’s TCO ranged from $4.09 to $10.02 per protected Mbps where the competitive vendor’s range was $20.60 to a whopping $83.65. This gave the PA-400 series a TCO advantage of 2.1x to 9.4x better.

      Performance at Scale is Critical with Security

      The results of the Miercom independent validation testing provide a valuable lesson that network and security professionals should heed: performance with security services enabled is what matters.

      A product that performs well with just raw TCP/UDP traffic with no security services enabled may not perform in real-world deployments. The true measure of NGFW’s performance must include testing performance of application traffic with security inspection enabled.

      Shannon McWilliams, VP of Supplier Alliances, Arrow ECS North America, said that “Arrow’s partnership with Palo Alto Networks enables us to offer our channel partners and their customers a great return on investment. The Miercom PA-400 report shows the architectural advantages of the PA-400 series. This platform allows our channel partners’ customers to easily leverage all of the security services that they have purchased without worrying about the impact on firewall performance.”

      It’s critical that as companies evaluate security products, they are tested at maximum load with all security features enabled as this simulates real world scenarios. Businesses should not have to knowingly degrade their threat posture to maintain application performance.

      With that caution in mind, Palo Alto’s PA-400 series’ single pass architecture is ideally suited for today’s network-centric world. As traffic volumes continue to increase, the difference between the product and legacy products will become more apparent.

      Also see: Top Cybersecurity Companies

      Zeus Kerravala
      https://zkresearch.com/
      Zeus Kerravala is an eWEEK regular contributor and the founder and principal analyst with ZK Research. He spent 10 years at Yankee Group and prior to that held a number of corporate IT positions. Kerravala is considered one of the top 10 IT analysts in the world by Apollo Research, which evaluated 3,960 technology analysts and their individual press coverage metrics.
      Get the Free Newsletter!
      Subscribe to Daily Tech Insider for top news, trends & analysis
      This email address is invalid.
      Get the Free Newsletter!
      Subscribe to Daily Tech Insider for top news, trends & analysis
      This email address is invalid.

      MOST POPULAR ARTICLES

      Latest News

      Zeus Kerravala on Networking: Multicloud, 5G, and...

      James Maguire - December 16, 2022 0
      I spoke with Zeus Kerravala, industry analyst at ZK Research, about the rapid changes in enterprise networking, as tech advances and digital transformation prompt...
      Read more
      Applications

      Datadog President Amit Agarwal on Trends in...

      James Maguire - November 11, 2022 0
      I spoke with Amit Agarwal, President of Datadog, about infrastructure observability, from current trends to key challenges to the future of this rapidly growing...
      Read more
      IT Management

      Intuit’s Nhung Ho on AI for the...

      James Maguire - May 13, 2022 0
      I spoke with Nhung Ho, Vice President of AI at Intuit, about adoption of AI in the small and medium-sized business market, and how...
      Read more
      Applications

      Kyndryl’s Nicolas Sekkaki on Handling AI and...

      James Maguire - November 9, 2022 0
      I spoke with Nicolas Sekkaki, Group Practice Leader for Applications, Data and AI at Kyndryl, about how companies can boost both their AI and...
      Read more
      Cloud

      IGEL CEO Jed Ayres on Edge and...

      James Maguire - June 14, 2022 0
      I spoke with Jed Ayres, CEO of IGEL, about the endpoint sector, and an open source OS for the cloud; we also spoke about...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2022 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×